IT Security News Daily Summary 2022-07-28

• Lawmakers call for DHS inspector general to ‘step aside’ from Secret Service probe

• AI can be a first line of defense in fielding 988 calls

• Election info must be more accessible to disabled, survey says

• Akamai blocked the largest DDoS attack ever on its European customers

• Lawmakers float FITARA changes as scores get dragged down by missing data

• 3 Steps to Build Hybrid Workplace Connection thru Virtual Experiences

• Calls Mount for US Gov Clampdown on Mercenary Spyware Merchants

• Abortion Information Is Coming Down Across Social Media. What Is Happening and What Next.

• Microsoft: Austrian company DSIRF selling Subzero malware

• Breach Exposes Users of Microleaves Proxy Service

• Hack Post-Quantum Cryptography Now So That Bad Actors Don’t Do It Later

• Suspected radiation alert saboteurs cuffed by cops after sensors disabled

• Google Gmail Rolls Out New Interface For All Users

• Top republican to ‘seriously consider pulling the plug’ on VA’s new EHR system

• GAO offers options for improving U.S. semiconductor supply

• What does the demise of bitcode mean for the future of application security?

• Patch Now: Atlassian Confluence Bug Under Active Exploit

• LibreOffice fixed 3 flaws, including a code execution issue

• How Organizations Manage to Understand Millions of Unstructured Data Files at Scale

• Unscrambling Cybersecurity Acronyms: The ABCs of Endpoint Security

• Threat actors use new attack techniques after Microsoft blocked macros by default

• Federal Preemption of State Privacy Law Hurts Everyone

• US State Department Offers $10 Million for Information on North Korean Hackers

• Multiple Security Flaws Found In Nuki Smart Locks

• Why cities and towns see a huge economic opportunity in the semiconductor bill

• Threat Actors Pivot Around Microsoft’s Macro-Blocking in Office

• Spanish Police Arrest Alleged Radioactive Monitoring Hackers

• Anatomy of a Cloud-Service Security Update

• 5 Benefits of a Cloud Firewall

• A Navy cyber effort is fixing thousands of holes—and building tech talent

• Google delays removal of third-party cookies in Chrome through 2024

• AWS adds anti-malware and PII visibility to storage

• S3 Ep93: Office security, breach costs, and leisurely patches [Audio + Text]

• What the White House’s Cybersecurity Workforce Plan Should Look Like

• Radioactivity monitoring and warning system hacked, disabled by attackers

• CIOReview Names Cobalt Iron Among 10 Most Promising IBM Solution Providers 2022

• Movement Bank Seeks New Technologies to Support the Underserved through CSI’s NuPoint® Core Platform

• Southwest Healthcare System Signs New Three-Year Managed Cybersecurity RPP Contract With CynergisTek Worth Over $600,000

• How I Prepared for the CISSP Exam

• Deploying a Modern Bank Card Program: Part One

• EU Officials Phones Hacked By NSO’s Pegasus Spyware – Report

• What Is the Impact of AI on Cybersecurity? 3 Interesting Use Cases

• $10 million reward offered for information on foreign government-linked malicious hackers

• House Passes Cybersecurity Bills Focusing on Energy Sector, Information Sharing

• Crackdown on BEC Schemes: 100 Arrested in Europe, Man Charged in US

• Cybersecurity Growth Investment Flat, M&A Activity Strong for 2022

• Ransomware Group Demands £500,000 From School

• Citibank, Bank of America, Capital One, and others Targeted by ‘Robin Banks’ PhaaS

• Industrial systems: What it takes to secure and staff them

• Akamai blocks worlds largest DDoS attacks in Europe

• Enough’s enough: 7 signs to put down your phone and walk away

• The SMB Guide to Cyber Resilience | Avast

• Why enterprises face challenges in protecting machine identities

• US Expands Cybersecurity Partnership With Ukraine

• Facebook May Allow COVID Misinformation Back On Its Platforms

• MAR-10386789-1.v1 – Log4Shell

• Samba Releases Security Updates

• CISA Releases Log4Shell-Related MAR

• Why enterprises face challenges protecting machine identities

• Trump has endorsed a plan to purge the civil service of ‘rogue bureaucrats’

• MAR-10386789-1.v1 – Log4Shell

• Samba Releases Security Updates

• CISA Releases Log4Shell-Related MAR

• Automated dynamic application security testing with RapiDAST and cross-team collaboration

• TikTok owner ByteDance pushed a pro-China agenda to Americans, say former employees

• FTC Lawsuit To Block Meta Acquisition Of VR Developer Within

• Proof of Stake Alternatives Every Developer Should Know Of

• NIST Supply Chain Security Guidelines: 10 Key Takeaways

• How Tor Is Fighting—and Beating—Russian Censorship

• Google Delays Blocking 3rd-Party Cookies in Chrome Browser Until 2024

• ENISA provides data related to major telecom security incidents in 2021

• Inside The Energy Department’s 10-Year Plan To Reshape Cybersecurity In The Sector

• Microsoft Exposes Tactics Of European Mercenary Spyware Broker

• FileWave Fixes Bugs That Left 1,000+ Orgs Open To Ransomware

• US Puts $10 Million Bounty On North Korean Cyber Crews

• “Orwellian in the extreme” food store installs facial recognition cameras to stop crime, faces backlash

• Alphabet Misses Earnings Forecast, But Pleases With Strong Ad Performance

• Attackers Use Malicious IIS Extensions to Deploy Covert Backdoors into Exchange Servers

• API Security Weekly: Issue 172

• Exploitation of Recent Confluence Vulnerability Underway

• Securing Smart Cities from the Ground Up

• The Chatter Podcast: Spotting Fake News with Cindy Otis

• What is Cyber-Essential Patch Compliance?

• Here’s How BlackMatter Ransomware is Linked With LockBit 3.0

• Protect your business from cybercrime with this dark web monitoring service

• What Women Should Know Before Joining the Cybersecurity Industry

• July 2022 Web Server Survey

• FITARA 14 sees just one overall A and stagnant grades

• Microsoft: Hackers are Using Malicious IIS Extensions to Backdoor Exchange Servers

• 1,000s of Phishing Attacks Blast Off From InterPlanetary File System

• Top MSSP CEOs Share 7 Must-Do Tips for Higher MSSP Revenue and Margin

• Microsoft Uncovers Austrian Company Exploiting Windows and Adobe Zero-Day Exploits

• Hackers Opting New Attack Methods After Microsoft Blocked Macros by Default

• Kubernetes security: Shift-left strategies and simplifying management

• Microsoft: Attackers Increasingly Using IIS Extensions as Server Backdoors

• France Closes ‘Cookies’ Case Against Facebook

• Moxa NPort Device Flaws Can Expose Critical Infrastructure to Disruptive Attacks

• After Dobbs, Democrats and Republicans Switch Places on Speech Policy

• LofyLife: malicious npm packages steal Discord tokens and bank card data

• Numerous Security Vulnerabilities Found In Enabot Ebo Air Smart Robot

• A Comprehensive Guide to Navigating The Cybersecurity Jungle

• How to Combat the Biggest Security Risks Posed by Machine Identities

• European firm DSIRF behind the attacks with Subzero surveillance malware

• New UFEI Rootkit

• Meta Posts First Ever Revenue Decline, Amid Intense Pressures

• IriusRisk simplifies security for developers with new infrastructure-as-code capability

• NCSC Startup Program Seeking Candidates to Help Protect Critical Infrastructure

• Google brings Street View back to India following 2016 ban

• Rivian Confirms It Will Cut 6 Percent Of Staff

• Hackers Change Tactics for New Post-Macro Era

• APT trends report Q2 2022

• Is Your Car the Next Security Risk? – Intego Mac Podcast Episode 250

• Malware on IBM Power Systems: What You Need to Know

• How attackers are adapting to a post-macro world

• Microsoft Threat Intelligence Center Links Threat Group to Austrian Spyware Vendor DSRIF

• Cybersecurity is becoming a top priority among critical infrastructure operators

• Social Media Accounts Hijacked to Post Indecent Images

• 22 million US health records breached thus far in 2022

• A Comprehensive Guide to Hybrid Cloud for Businesses

• 5 ways to effortlessly spot and eliminate hidden threats in your network

• Candiru: Attack targeting journalists in the Middle East

• European Police Arrest 100 Suspects in BEC Crackdown

• U.S. Offers $10 Million Reward for Information on North Korean Hackers

• LibreOffice Releases Software Update to Patch 3 New Vulnerabilities

• Spain police arrested two men accused of cyber attacks on radioactivity alert network (RAR)

• Do you know what your supply chain is and if it is secure?

• FIN7 now enters ransomware as a service business

• Twitter user data sold for $30k on dark selling forum

• Cash App fraud: 10 common scams to watch out for

• 84% of organizations experienced an identity-related breach in the past 18 months

• Only 25% of organizations consider their biggest threat to be from inside the business

• The future of attack surface management (ASM)

• 2022-07-27 – IcedID (Bokbot) activity: two infection runs

• 2022 Governance, Risk, and Control Conference Provides a Customized Learning Experience

• SCVX Corp. Announces Redemption of Class A Ordinary Shares

• Hiring Managers Lead on Entry-Level Cybersecurity Job Descriptions

• Day in the life of a digital citizen after eIDAS2

• Everything to know about SaaS data security

• NetDiligence Breach Plan Connect updates provide senior managers with cyber incident response plan

• Rapid7 adds layered context capabilities to its InsightCloudSec platform

• Uptycs releases new CDR functionality to help organizations detect malicious behaviors

• Teleport 10 enables single sign-on to any infrastructure resource without passwords or usernames

• 1 in 3 employees don’t understand why cybersecurity is important

• Everything You Need to Know About Monkeypox

• 0-days sold by Austrian firm used to hack Windows users, Microsoft says

• The High-Stakes Race to Engineer New Psychedelic Drugs

• Newly found Lightning Framework offers a plethora of Linux hacking capabilities

• Discovery of new UEFI rootkit exposes an ugly truth: The attacks are invisible to us

• CircleCI launches support for GitLab SaaS developers

• Model9 integrates with Pure Storage to help mainframe enterprises manage their data

• Socure collaborates with Middesk to accelerate onboarding processes for businesses

• SafeGuard Cyber integrates with Okta and Azure AD to automate identity-based responses for enterprises

• Digital Key Release 3 v1.1: Store, authenticate, securely share vehicle digital keys

• When Human Security Meets PerimeterX

• How to Evaluate Progress in the Justice Department’s Jan. 6 Investigation

• Critical Samba bug could let anyone become Domain Admin – patch now!

• Overcoming the Fail-to-Challenge Vulnerability With a Friendly Face

• OneTouchPoint, Inc. Provides Notice of Data Privacy Event

• HackerRank appoints Monica Ohara as CMO

• Robert Conrad joins Silicon Labs Board of Directors

• Deep Instinct hires Carl Froggett as CIO

• Mirantis acquires amazee.io to improve software delivery hub for modern applications

• FileWave fixes bugs that left 1,000+ orgs open to ransomware, data theft

• Google once again delays phasing out third-party cookies

• Imperva Reaches New Heights as it Opens PoPs in Cape Town and Rio

• We’re likely only seeing ‘the tip of the iceberg’ of Pegasus spyware use against the US

• IT Security News Daily Summary 2022-07-27

• With $11.5M In Funding, Naoris Protocol Will Use Blockchain & Decentralization To Plug Web3 Security Gaps

• Bill aims to create one disaster recovery assistance application

• Preventing wildfires could start with data from controlled burns

• Nuki Smart Lock Vulnerabilities Allow Hackers to Open Doors

• Victim of Private Spyware Warns It Can be Used Against US

• CISOs: Embrace a common business language to report on cybersecurity

• AWS re:Inforce details how to fortify enterprise security culture and tools

• Attackers increasingly abusing IIS extensions to establish covert backdoors

• Multiple Windows, Adobe Zero-Days Anchor Knotweed Commercial Spyware

• US puts $10 million bounty on North Korean cyber-crews

• Twitter Hacker Seeks $30,000 For Stolen Data On 5.4 Million Users

• City tests smart, low-cost traffic cameras

• Apple network traffic takes mysterious detour through Russia

• Alert! Check if you have these Android Malware Apps Installed With 10M+ Downloads

• Zero-Trust Architecture Is Incomplete Without Digital Signatures

• Major Challenges in Cybersecurity and How Seceon helping to Overcome those.

• Trends To Ensure Cybersecurity In 2022

• Chinese Hackers Deploy Malware in Firmware Images of Certain Motherboards

• SSH2 vs. SSH1 and why SSH versions still matter

• data breach

• TSP officials say they’re nearing ‘normalcy’ after a troublesome recordkeeper transition

• Cyber insurance price hike hits local governments hard

• Heat.gov offers real-time data, resources to combat extreme heat

• US Offers $10M Double-Reward for North Korea Cyberattacker Info

• Average Data Breach Costs Soar to $4.4M in 2022

• Time Between Vulnerability Disclosures To Exploits Is Shrinking

• Messaging Apps Tapped As Platform For Cybercriminal Activity

• Woman Tells Congress What It’s Liked To Be Hacked By NSO’s Pegasus

• Discovery Of New UEFI Rootkit Exposes An Ugly Truth: The Attacks Are Invisible To Us

• Quantum cryptography: Hacking is futile

• A key role for quantum entanglement

• Messaging Apps Tapped as Platform for Cybercriminal Activity

• AWS ups security for Elastic Block Store, Kubernetes service

• How to quickly deploy the Odoo ERP solution with Docker

• Mailing List Provider WordFly Scrambling to Recover Following Ransomware Attack

• HUMAN Security and PerimeterX Merge on Mission to Combat Bots

• Microsoft Catches Austrian Company Exploiting Windows, Adobe Zero-Days

• Cyber-Criminal Offers 5.4m Twitter Users’ Data

• Is Your Home or Small Business Built on Secure Foundations? Think Again…

• Knotweed Euro cyber mercenaries attacking private sector, says Microsoft

• Ducktail Spear-Phishing Campaign Targets Facebook Business Accounts Via LinkedIn

• Digital PIN – The Next Step in Digital First Banking

• AT&T Cybersecurity Insights Report: A Focus on Manufacturing

• DevSecOps monitor and decommission

• AwareGO Platform Reveals Even Seasoned Security Experts are Vulnerable to Common Security Risks

• CosmicStrand malware targets old Asus and Gigabyte motherboards

• Chip Revenues To Decline 2.5 Percent In 2023, Warns Gartner

• Top 7 data loss prevention tools for 2022

• First Cohort Graduates from PSM Cyber Stars Program at Liverpool FC

• HR Emails Dupe Employees The Most – KnowBe4 research reveals

• What roles do humans play in cyber breaches

• The lifecycle of a software vulnerability

• Microsoft to turn on ransomware protection on Windows 11 and 10 OS by default

• Samsung keeps its Galaxy devices safe from Pegasus Spying software

• Your Linux Firewall Cant Stop These 3 Attacks!

• Senators Introduce Quantum Encryption Preparedness Law

• These 28+ Android Apps with 10 Million Downloads from the Play Store Contain Malware

• Russia Fines Google $34m, After Last Week’s $358m Penalty

• Cybersecurity mesh adds decentralized security and swarm AI for remote-first enterprises

• GenCyber: NSA sets up summer camps to teach kids to hack

• Time from vulnerability disclosures to exploits is shrinking

• What the Titanic Can Teach Us About Fraud?

• IBM Security: Cost of Data Breach Hitting All-Time Highs

• Criminals Use Malware as Messaging Bots to Steal Data

• DUCKTAIL operation targets Facebook’s Business and Ad accounts

• Heimdal™ Threat Hunting Journal July 2022 Edition

• Arts Organizations’ Email Lists Compromised by Ransomware Attack

• New quantum hardware could allow computers to process information more naturally

• Infostealer malware targets Facebook business accounts to capture sensitive data

• Advocating for Passion, Kindness and Women in STEM

• Heimdal™ Threat Hunting Journal July 2022 Edition

• Untangling KNOTWEED: European private-sector offensive actor using 0-day exploits

• Microsoft Q4 Profits From Cloud Growth, But Misses Forecasts

• No More Ransom Helped More Than 1.5 Million People Decrypt Their Devices

• The Great BizApp Hack: Cyber-Risks in Your Everyday Business Applications

• Heimdal™ Threat Hunting Journal July 2022 Edition

• IIS extensions are on the rise as backdoors to servers

• LibreOffice security update fixes macro execution bypass and potential password leaking

• Biden administration unveils website to help combat extreme heat conditions

• Microsoft warns of stealthy backdoors used to target Exchange Servers

• These ransomware hackers gave up when they hit multi-factor authentication

• Race against time: Hackers start hunting for victims just 15 minutes after a bug is disclosed

• AWS Announces Enhancements to Cloud Security, Privacy, Compliance

• Dozens of ‘Luca Stealer’ Malware Samples Emerge After Source Code Made Public

• US Offers $10 Million for Information on North Korean Hackers

• 8 Hot Summer Fiction Reads for Cybersecurity Pros

• Constitutional Citizenship in the U.S. Territories

• Anti-Censorship Legislation: A Flawed Attempt to Address a Legitimate Problem

• Heimdal™ Threat Hunting Journal July 2022 Edition

• Running a Sustainable Business in 2022

• Anti-vaxxer dating site exposes user data

• Azure Gateway Load Balancer is now available—and Check Point supports it today!

• Digital Hands and SentinelOne join forces to automate the SOC

• Teleport introduces passwordless authentication to access management

• In post-Roe US, experts share how to keep your data private

• Securing Open-Source Software

• Online Dating Made Better – Enter Smart Technology

• PrestaShop warns of vulnerability: Update your stores now!

• API security firm Impart Security promises solutions, not more alarms, for overwhelmed security staff

• Microsoft warns of stealthy backdoors used to target Exchange Servers, email

• Why you really need multi-factor authentication: These ransomware hackers gave up when they saw it

• Twitter Data Breach From Former Gartner Cybersecurity Analyst

• LockBit Ransomware Gang Claims It Ransacked Italy’s Tax Agency

• A ‘Top Tier’ Hacking Gang Is Likely To Be Behind Entrust Ransomware Attack

• Simplifying the fight against ransomware: An expert explains

• Don’t Call the New Federal Gun Law a Gun Law

• Taking the Risk-Based Approach to Vulnerability Patching

• New Ducktail Infostealer Malware Targeting Facebook Business and Ad Accounts

• More than a VPN: Announcing Cisco Secure Client (formerly AnyConnect)

• The strange similarities between Lockbit 3.0 and Blackmatter ransomware

• Major Security Vulnerability In Prestashop Platform

• Weak data protection helped China attack US Federal Reserve, report says

• Amazon UK To Raise Cost Of Prime Service

• T-Mobile agrees to pay customers $350 million in settlement over data breach

• Build SBOMs with Microsoft’s internal tool

• Data breach costs record $4.3M with firms passing buck to customers

• Organizations need to change their strategy to reduce cyber risk

• OneWeb Confirms Merger With Eutelsat

• US Doubles Reward for Info on North Korean Hackers

• Cost of Data Breach Reaches $4.35m on Average Globally

• Lockbit Ransomware Gang Have Claimed Responsibility For Recent Public Attacks

• Malicious IIS Extensions Gaining Popularity Among Cyber Criminals for Persistent Access

• NFT Hacking Group Attacks On The Rise, Report Finds

• No More Ransom Has Helped Over 1.5m Victims

• Serious OAuth vulnerability In Grafana Could Allow Account Takeover

• Data Breach Costs Reach New Record High

• The global average cost of a data breach reaches an all-time high of $4.35 million

• Black Hat USA 2022: Schedule for Las Vegas hybrid event

• Cyber Security Management System (CSMS) for the Automotive Industry

• IBM puts NIST’s quantum-resistant crypto to work in Z16 mainframe

• What’s New in the 2022 Cost of a Data Breach Report

• Cybercrime goods and services are cheap and plentiful

• How SMBs are evolving their cybersecurity operations practices

• Organizations are struggling with SaaS security. Why?

• Israel’s new cyber-kinetic lab will boost the resilience of critical infrastructure

• Vietnamese attacker circumvents Facebook security with ‘DUCKTAIL’ malware

• Average cost of data breach surpasses $4 million for many organizations

• North Korean APT37 Hackers Attack EU Countries with Konni RAT Malware

• 2022-07-26 – Files for an ISC diary (IcedID with DarkVNC and Cobalt Strike)

• IBM’s Cost of a Data Breach Report finds invisible ‘cyber tax’

• Is any organisation risk and data breach free?

• Aruba announces AIOps solutions to simplify network operations for IT teams

• AlertMedia Analyst Access offers direct interaction with threat intelligence experts during critical events

• Runecast adds CNAPP capabilities to secure workloads across three cloud service providers

• NetApp Spot Security identifies and assesses cloud security posture risks

• Find out why developers love Pentest as a Service (PtaaS)

• 2022-07-25 – IcedID (Bokbot) infection with Cobalt Strike

• Wawa Agrees to Payment, Security Changes for ’19 Data Breach

• Mild monthly security update from Firefox – but update anyway

• A Retrospective on the 2015 Ashley Madison Breach

• General Sir Chris Deverell joins Conceal Board of Advisors

• Resecurity acquires Cybit Sec to expand its threat intelligence capabilities in the Middle East

• Infobip partners with Microsoft to enhance digital communications

• GoTrust Idem Key uses FIDO standards to access EU eIDAS digital services

• Stairwell collaborates with Cyderes to expand visibility into malicious activity for customers

• Paytm – 3,395,101 breached accounts

• Charter told to pay $7.3b in damages after cable installer murders grandmother

• Rods and Cones, and EDR “blindness”

Generated on 2022-07-28 23:55:35.274858